Privacy Policy
隐私政策

1. Scope and operator

This policy applies to RunningWidget (步览), its iPhone and iPad app, widgets, authorization service and product website. The operator responsible for this processing is LIGHTOUCH Kabushiki Kaisha (LIGHTOUCH株式会社 / LIGHTOUCH K.K.), Japan. Contact: contact@ligh-t-ouch.com.

The app is in development testing. The current version connects to COROS. Garmin Connect integration is in preparation and is not yet available; the current app does not collect Garmin data. The Garmin paragraphs below describe the intended use and safeguards for that integration. We will disclose the actual enabled scopes and data flow before it becomes available and obtain separate authorization. This page alone does not grant access to any account.

2. Data and specific purposes

• Connection information: the selected platform's user identifier, authorization credentials, connection status and expiry, and app installation identifiers needed to connect your account, renew access and prevent unauthorized requests.
• Activity summaries: identifiers, start time, activity type, distance, duration and pace, used to show recent runs, calculate natural-week, month and year running totals, and show goal progress and yearly activity history. The current COROS integration does not download FIT activity files or routes.
• Available wellness summaries: dates, steps, resting heart rate, overnight HRV and sleep duration, used to display your daily status. Availability depends on the device, platform and scopes you authorize. Missing values are not inferred as zero.
• Your settings: running goals, units, statistics time zone, race dates and widget preferences, used to customize your personal dashboard.
• Optional app account: if you use Sign in with Apple, Apple's app-specific user identifier and authentication credentials are used to manage your independent RunningWidget account and restore its linked connection. We do not request your Apple password.

For the planned Garmin integration, separately authorized Garmin activity and wellness data will be used only for the personal app and widget displays described above. We will request Health API and Activity API access relevant to these purposes. This application does not plan to send workouts or courses to Garmin, or request women's health data.

3. Processing, storage and service providers

In the current COROS integration, the app and widgets read authorized summaries directly from COROS and process and store them on your device. Access credentials are protected in Apple's Keychain. The authorization service retains the connection and encrypted refresh credentials needed to maintain it; it does not operate a server-side activity or wellness history database. The app and widgets share the local records and the limited credentials required for widget updates.

The entities involved are:

• LIGHTOUCH K.K.: operates RunningWidget and handles connection records, support and data-rights requests.
• Cloudflare: hosts the website and authorization service, including its connection database. It processes authentication and necessary service-security information on our behalf. The planned Garmin integration will also use Cloudflare to process authorized data as needed for delivery to your RunningWidget dashboard; this functionality is not live yet.
• COROS, and Garmin when enabled: provide the source account and data under your platform authorization. They also handle their own sign-in and consent pages.
• Alibaba Cloud: hosts LIGHTOUCH's shared COROS authorization callback relay, operated for Project-S. The relay forwards short-lived authorization callback parameters, including code and state, to RunningWidget's independent authorization service. RunningWidget activity and wellness summaries do not pass through that relay, and using it does not create a training-camp account.
• Apple: provides iOS/iPadOS, WidgetKit, Keychain and optional Sign in with Apple. The current app does not upload your activity history to an iCloud database.

These providers may process information in jurisdictions outside Japan under their applicable privacy terms and service safeguards. We use HTTPS, encrypted server-side credentials and limited access to protect data. Platform access and refresh tokens are not included in app callback URLs or data exports.

4. No sale, advertising or AI use

We do not sell, rent or license Garmin, COROS, activity or wellness data to third parties. We do not use it for advertising, data brokerage or unrelated products, share it with coaches or other users, or send it to AI providers. RunningWidget does not use this data to train AI models or generate AI analysis. Access by the service providers described above is limited to operating the requested service.

If a future feature would use Garmin data with AI, it will require a clear explanation of the purpose, provider and data involved and your separate, explicit opt-in before any such transfer. Refusing that optional use will not authorize it implicitly. Material new purposes or recipients will be disclosed before they are introduced.

5. Consent and your controls

You choose whether to connect a platform and which permissions to approve on its official consent page. You can use sample displays without linking an account. Access to available platform data is based on that authorization; connection and security records are used to provide and protect the requested service.

In the current app, open My (我的) to disconnect COROS and clear this app's connection and local activity cache. Disconnecting does not delete the source COROS account, revoke a shared client's access for other products or erase records on another device. Use the platform's own connected-app controls if you want to revoke its authorization. The future Garmin feature will provide its own disconnect control and respect Garmin revocation.

6. Retention, deletion and rights

Local summaries are retained until they are replaced by a successful sync or you clear them. Goals and race settings remain after ordinary disconnection; use the app's local-data deletion control to remove those as well. Exported files and device backups are under your control and must be deleted separately.

COROS connection records and credentials are retained while that connection is active, subject to expiry, and removed when you successfully disconnect. Disconnecting COROS keeps your optional Apple-based RunningWidget account and its session; those account records and credentials are removed through the separate account-deletion process. Deleting the app alone does not request server-side account deletion. If you use the optional app account, choose Delete RunningWidget account (删除步览账号) in My and confirm your identity; the app removes that account and its linked connection and clears the current device's activity cache.

For the planned Garmin feature, authorized data will be retained only as needed for these dashboard purposes and until disconnection or a deletion request, subject to necessary legal obligations. We will disclose any server-side retention before enabling the integration. You can request access, correction, deletion, a copy of applicable data or withdrawal of consent by emailing contact@ligh-t-ouch.com. We may need to verify your identity. We will respond as required by applicable law; data held independently by Garmin, COROS or Apple is managed through that provider.

7. Website and support

This product website uses static pages without advertising trackers, analytics scripts or nonessential cookies. Hosting and security infrastructure may process IP address, browser information, request path and time to deliver and protect the site. If you email us, we process your email address and the content you send to respond and resolve the request, retaining it only as needed for support or legal obligations. Please do not send passwords, access tokens or complete health records.

8. Changes

We will update the date on this page when this policy changes. Material changes to authorized data use will be explained in the app or connection flow before they take effect, with fresh consent where required. Contact us at the address above for questions about this policy.

1. 适用范围与运营方

本政策适用于步览 RunningWidget 的 iPhone、iPad App、小组件、独立授权服务和产品网站。负责上述处理的运营方为日本 LIGHTOUCH株式会社（LIGHTOUCH Kabushiki Kaisha / LIGHTOUCH K.K.）。联系邮箱：contact@ligh-t-ouch.com。

App 当前处于开发测试阶段，已接入 COROS。Garmin Connect 接入仍在准备中，当前 App 尚不收集 Garmin 数据。下文关于 Garmin 的内容说明拟采用的用途和保护边界；功能开放前会说明实际权限与数据流程，并单独取得授权。本政策本身不授予任何账号访问权。

2. 数据与具体用途

• 连接信息：运动平台用户标识、授权凭据、连接状态与有效期，以及维持连接、续期和防止未授权请求所需的 App 安装标识。
• 活动概要：活动标识、开始时间、类型、距离、用时和配速，用于最近一跑、自然周月年跑量、目标进度与年度足迹。当前 COROS 接入不下载 FIT 文件或运动轨迹。
• 可用健康概要：日期、步数、静息心率、夜间 HRV、睡眠时长，用于今日状态展示。具体字段取决于设备、平台与所授权权限，缺失值不推断为零。
• 个人设置：跑量目标、单位、统计时区、比赛日期和小组件偏好，用于个性化展示。
• 可选步览账号：使用通过 Apple 登录时，处理 Apple 的 App 专属用户标识与认证凭据，用于独立步览账号及恢复关联连接，不索取 Apple 密码。

计划中的 Garmin 接入仅将单独授权的活动与健康数据用于上述个人 App 和小组件展示，拟申请相关的 Health API 与 Activity API。当前计划不向 Garmin 发送训练或路线，也不申请女性健康数据。

3. 处理、存储与服务提供方

当前 COROS 接入由主 App 和小组件直接读取已授权概要，在本机处理与保存。访问凭据由 Apple Keychain 保护；独立授权服务仅保留维持连接所需的连接记录和加密续期凭据，不建立服务端运动或健康历史数据库。主 App 与小组件共享本机记录及组件更新所需的有限凭据。

• LIGHTOUCH K.K.：运营步览，处理连接记录、支持与数据权利请求。
• Cloudflare：托管网站、授权服务及连接数据库，代表我们处理认证与必要的服务安全信息。计划中的 Garmin 接入也会使用 Cloudflare 处理向步览展示页交付所必需的已授权数据，该功能目前尚未上线。
• COROS，以及未来启用后的 Garmin：在用户授权下提供源账号与数据，并处理各自的登录和同意页面。
• 阿里云 Alibaba Cloud：托管 LIGHTOUCH 为 Project-S 运营的共用 COROS 授权回调转发服务。该服务将授权 code、state 等短期回调参数转发至步览的独立授权服务；步览的运动与健康概要不经过该转发服务，使用它也不会创建训练营账号。
• Apple：提供 iOS/iPadOS、WidgetKit、Keychain 与可选的通过 Apple 登录；当前 App 不将运动历史上传到 iCloud 数据库。

这些服务可能依其隐私条款与服务保护措施，在日本以外的地区处理信息。我们使用 HTTPS、服务端凭据加密和受限访问保护数据；平台 accessToken 和 refreshToken 不进入 App 回跳 URL 或数据导出。

4. 不出售、不用于广告或 AI

我们不向第三方出售、出租或许可 Garmin、COROS、运动或健康数据，不将其用于广告、数据交易或无关产品，不分享给教练、其他用户，也不发送给 AI 提供方。步览不使用这些数据训练 AI 模型或生成 AI 分析。上述服务提供方仅为运行用户请求的服务处理必要数据。

若未来功能拟结合 AI 使用 Garmin 数据，须先明确说明用途、提供方和涉及数据，并在任何传输前单独取得你的明确同意；拒绝可选用途不构成默许授权。新增实质用途或接收方会在启用前说明。

5. 同意与连接控制

是否连接平台、批准哪些权限，由你在平台官方同意页选择。未连接时也可查看示例。平台数据访问以该授权为基础；连接与安全记录用于提供和保护你请求的服务。

当前可在 App「我的」断开 COROS，删除本项目连接并清除本机运动缓存。断开不删除源 COROS 账号、不撤销共享 client 对其他产品的授权，也不清除另一设备的数据。如需撤销平台授权，请使用平台自己的已连接应用控制。未来 Garmin 功能会提供独立断开入口并遵守 Garmin 撤销结果。

6. 保留、删除与个人权利

本机概要保留至成功同步替换或主动清除。普通断开会保留跑量目标与比赛设置；如需一并清除，请使用 App 的删除本机数据功能。导出文件和设备备份由你管理，须另行删除。

COROS 连接记录和凭据在连接有效期间保留，受有效期约束，并在成功断开后移除。断开 COROS 会保留可选的 Apple 步览账号及其会话；这些账号记录和凭据须通过独立账号删除流程移除。仅卸载 App 不等于申请删除服务端账号。使用可选账号时，可在「我的」选择「删除步览账号」并再次确认身份，删除该账号及其关联连接，并清除当前设备运动缓存。

未来 Garmin 数据仅为上述展示用途在必要期间保留，至断开或删除请求为止，但须保留的法律记录除外；如需服务端保留，会在功能启用前说明。可通过 contact@ligh-t-ouch.com 请求查询、更正、删除、取得适用数据副本或撤回同意。我们可能需要核验身份，并按适用法律响应。Garmin、COROS、Apple 独立持有的数据仍需通过相应平台管理。

7. 网站与支持

本产品网站为静态页面，没有广告追踪、分析脚本或非必要 Cookie。托管和安全基础设施可能为交付与保护网站处理 IP 地址、浏览器信息、请求路径和时间。来信时，我们处理邮箱及你提供的内容以答复和解决请求，仅在支持或法律需要期间保留。请勿发送密码、访问令牌或完整健康记录。

8. 政策更新

政策变化时会更新本页日期。涉及已授权数据用途的实质变化，会在生效前通过 App 或连接流程说明，并在需要时重新取得同意。如有疑问，请使用上述邮箱联系。